Improper URI Scheme Handling in Emacs Text Editor by Red Hat
CVE-2025-1244
8.8HIGH
Key Information:
- Status
- Vendor
- CVE Published:
- 12 February 2025
What is CVE-2025-1244?
A vulnerability exists in the Emacs text editor that stems from improper handling of custom 'man' URI schemes. This flaw enables attackers to execute arbitrary shell commands by deceiving users into visiting specially crafted websites or HTTP URLs containing redirects. Users should remain vigilant and avoid visiting untrusted links to mitigate potential exploitation.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Vasilij Schneidermann for reporting this issue.